EUVD-2017-3257

Malware in sbrugna...

EUVD-2017-3258

Malware in sbrugna...

Cross site request forgery (csrf)

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device...

CVE-2017-11646

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device...

CVE-2017-11645

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or systemconfig.html...

CVE-2017-11647

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

Design/Logic Flaw

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or systemconfig.html...

Cross site scripting

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

CVE-2017-11647

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

CVE-2017-11646

NetComm Wireless 4GT101W routers (Hardware 0.01, Software V1.1.8.8, Bootloader 1.1.3) are vulnerable to Cross-Site Request Forgery (CSRF) as detailed in CVE-2017-11646. The affected component is the device web interface; the root cause is the absence of CSRF protections/tokens in administration.h...

CVE-2017-11646

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device...

CVE-2017-11645

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or systemconfig.html...

CVE-2017-11647

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

CVE-2017-11647

NetComm Wireless 4GT101W routers (Hardware 0.01 / Software 1.1.8.8 / Bootloader 1.1.3) are affected by CVE-2017-11647 due to a stored cross-site scripting vulnerability triggered by creating an SSID with an XSS payload. Exploitation involves injecting script via the SSID field, allowing script ex...

CVE-2017-11647: Improper Neutralization of Input During Web Page Generation

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

CVE-2017-11646: Cross-Site Request Forgery (CSRF)

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device...

CVE-2017-11645: Improper Authentication

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or systemconfig.html...

PT-2017-12145

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W version V1.1.8.8 Description The issue allows for CSRF attacks, as demonstrated by using the administration.html page to disable the firewall. This is possible because the device does not contain any token that can...

PT-2017-12146

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W version V1.1.8.8 Description The issue allows for stored cross-site scripting attacks. By creating an SSID with an XSS payload, an attacker can successfully exploit this issue. Recommendations For version V1.1.8.8, avo...

PT-2017-12144

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 Description The issue concerns the lack of authentication for certain web pages, specifically logfile.html, status.html, and system config.html. This...